Confiant Threat Intelligence Team • 1 minute read
Threat Intelligence Red Button Security Alert: DCCBoost Attacks 05.09.2023
Forced redirect scareware by DCCBoost
Confiant alerts our customers whenever significant, widespread malvertising attacks occur in the digital advertising ecosystem. In this case, on May 9, 2023 the Confiant threat intelligence team notified clients of an attack by the threat actor we call DCCBoost.
Confiant's threat intelligence team has identified that threat actor DCCBoost is currently serving malicious ads through several sources.
DCCBoost is currently running a forced redirect scareware campaign, targeting the US, Canada and Europe on desktop environments. DCCBoost has been using fake McAfee scareware attacks since late 2021, after a long time spent targeting mobile devices. The current campaign is mostly active on BuckSense via many DSPs.
This campaign also uses some additional ways to stay undetected, waiting 5 seconds before activating, and only redirecting on user interaction (scrolling, clicking, key press anywhere on the page).
The attack started on May 3 and has ramped up during the weekend and through Monday, May 8.
- Minute Media
- Smile Wanted
- Taipei Digital
- Geographies: United States (87%), United Kingdom (9%), Canada (4%)
- Targeting: Desktop - Windows (71%), Mac (27%), Other (2%)
- Reach: Less than 0.5% of impressions in targeted geographies
Example of the DCCBoost Malvertising Attack, source Confiant.
Confiant also includes simple step-by-step instructions for our customers on how to protect their sites from this and other similar attacks in every alert, as well as screenshots where available.
Confiant's ad verification solutions and threat intelligence security attack alerts help defend the digital ad industry by enabling publishers and ad platforms to take back control of the ad experience from threat actors to protect their users. Our solutions protect reputation, revenue, and resources through real-time verification of digital advertisements.
Confiant's technology actively blocks and detects malicious activity, privacy infringements, and low-quality ads. By providing industry-leading protection against malvertising, disruptive ads, and privacy risks Confiant empowers premium ad platforms and publishers with actionable data to ensure the digital ad ecosystem is safe and secure for everyone.
Not part of the Confiant customer community yet? Request a free trial today.